Submission Details
Severity:
Lack of Emergency Pause Mechanism
Summary
No way to halt the oracle during attacks or critical failures.
Vulnerability Details
Malicious parameters or extreme market conditions cannot be manually mitigated.
Impact
Prolonged exposure to invalid price feeds.
Tools Used
Analysis of access control functions.
Recommendations
Add pause toggle:
emergency_stop: public(bool)
@external
def toggle_emergency():
require(msg.sender == admin)
self.emergency_stop = not self.emergency_stop
@view
@internal
def when_active():
assert not self.emergency_stop, "Paused"
Updates
Lead Judging Commences
0xnevi 3 months ago
Submission Judgement Published Reason: Incorrect statement
Assigned finding tags:
[invalid] finding-centralization-risk
- Per [codehawks documentation](https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity#findings-that-may-be-invalid) - Parameter change is executed via the Dao per docs > Also, it is worth noting that the oracle is controlled by a DAO and its parameters can be changed by a vote.
Prize pool breakdown
Total prize
14,723 OP
Eagles
1,472 OP
nSLOC
39437 OP / LOC
12,700
551
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.